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(57) Abstract: Method and apparatus for effecting handoflf in a system supporting both wireless and packet date sei 
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Q Protocol (PPP) connections for handoff In an alternate embodiment, the serving network and the taiget network do not share capa- 
^ bihties with respect to concurrent multiple service instances. When the serving network knows the status of the target network, the 
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METHOD AND APPARATUS FOR HANDOFF IN A 
COMMUNICATION SYSTEM SUPPORTING MULTIPLE SERVICE 
INSTANCES 

BACKGROUND 

Field 

[1001] The present invention relates to wireless communication systems 
generally and specifically, to methods and apparatus for handoff for a packet data 
service 

Background 

[1002] There is an increasing demand for packetized data services over 
wireless communication systems. As traditional wireless communication systems 
are designed for voice communications, the extension to support data services 
introduces many challenges. Specifically, the problems exist during handoff 
involving a Point-to-Point Protocol (PPP) communication of data packets. As 
systems upgrade components, compatibility issues between components may 
hinder operation of the system. Further, there is a desire to remove handoff 
responsibility from the mobile station and provide smart handoff by the 
infrastructure elements. 

[1003] There is a need, therefore, for fast, accurate handoff between Packet 
Data Service Nodes (PDSNs) and other infrastructure elements in a wireless 
communication system. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[1004] FIG. 1 is a timing diagram illustrating a call flow In a communication 
system, wherein the Source-PDSN (S-PDSN) and the Target-PDSN (T-PDSN) 
have similar capability. 

[1005] FIGs. 2 to 4 are timing diagrams illustrating a call flows in 
communication systems, wherein the S-PDSN and the T-PDSN have similar 
capability, but are not able to fully negotiate handoff. 
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[1006] FIG. 5 is a timing diagram illustrating a call flow In a communication 
system, wlierein the S-PDSN and the T-PDSN have similar capability, wherein 
one of the service instances is dormant. 

[1007] FIG. 6 is a timing diagram Illustrating a call flow in a communication 
system, wherein the Source-PDSN (S-PDSN) and the Target-PDSN (T-PDSN) 
have similar capability, wherein the Radio Network (RN) triggers various Point-to- 
Point (PPP) connections to effect handoff. 

[1008] FIG. 7 is a timing diagram illustrating call flow in a communication 
system, wherein the Target-Radio Network (T-RN) does not support multiple 
service instances. 

[1009] FlGs. 8 and 9 are timing diagrams illustrating call flow in a 
communication system, wherein the T-PDSN does not support multiple service 
instances. 

[1010] FIG. 10 is a block diagram of the communication system supporting IP 
data transmissions. 

[1 01 1 ] FIG. 1 1 illustrates communication links involved in a handoff example for 

a system wherein the S-PDSN and the T-PDSN have similar capability. 
[1012] FIG. 12 illustrates communication links involved in a handoff example for 
a system wherein the S-PDSN and the T-PDSN have different capabilities. 
[1013] FIG. 13 illustrates communication links involved in a handoff example for 
a system wherein the Source-Radio Network (S-RN) and the Target-Radio 
Network (T-RN) have different capabilities. 

DETAILED DESCRIPTION 

[1014] The word "exemplary" is used exclusively herein to mean "serving as an 
example, instance, or illustration." Any embodiment described herein as 
"exemplary" is not necessarily to be construed as preferred or advantageous over 
other embodiments. While the various aspects of the embodiments are presented 
in drawings, the drawings are not necessarily drawn to scale unless specifically 
indicated. 

[1015] The following discussion develops the exemplary embodiments by first 
presenting a network implementing mobile IP to communicate data to and from a 
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mobile node. Then a spread-spectrum wireless communication system is 
discussed. Next, the mobile IP network is shown implemented In the wireless 
communication system. The messages are illustrated that register a mobile node 
with a home agent thereby enabling IP data to be sent to and from the mobile 
node. Finally, methods for reclaiming resources at the home agent are explained. 
[1016] Note that the exemplary embodiment is provided as an exemplar 
throughout this discussion; however, alternate embodiments may Incorporate 
various aspects without departing from the scope of the present invention. 
Specifically, the various embodiments are applicable to a data processing system, 
a wireless communication system, a mobile IP network and any other system 
desiring efficient use and management of resources. 

[1017] The exemplary embodiment employs a spread-spectrum wireless 
communication system. Wireless communication systems are widely deployed to 
provide various types of communication such as voice, data, and so on. These 
systems may be based on Code Division-Multiple Access (CDMA), Time Division 
Multiple Access (TDMA), or some other modulation techniques. A CDMA system 
provides certain advantages over other types of systems, including increased 
system capacity. 

[1018] A system may be designed to support one or more standards such as 
the "TIA/EIA/IS-95-B Mobile Station-Base Station Compatibility Standard for Dual- 
Mode Wideband Spread Spectrum Cellular System" referred to herein as the IS-95 
standard, the standard offered by a consortium named "3rd Generation 
Partnership Project" referred to herein as 3GPP, and embodied in a set of 
documents including Document Nos. 3G TS 25.211, 3G TS 25.212, 3G TS 
25.213, and 3G TS 25.214, 3G TS 25.302, referred to herein as the W-CDMA 
standard, the standard offered by a consortium named "3rd Generation 
Partnership Project 2" referred to herein as 3GPP2, and TR-45.5 referred to herein 
as the cdma2000 standard, formerly called 18-2000 MC. The standards cited 
hereinabove are hereby expressly incorporated herein by reference. 
[1019] Each standard specifically defines the processing of data for 
transmission from base station to mobile, and vice verea. As an exemplary 
embodiment the following discussion considers a spread-spectrum communication 
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system consistent with tlie CDMA2000 standard of protocols. Alternate 
embodiments may incorporate another standard. 

[1020] A communication system 100 according to one embodiment is shown in 
FIG. 10. The communication system 100 includes both wireless portions and 
Internet Protocol (IP) portions. The terminology used to describe the various 
elements of the system 200 is intended to facilitate understanding of the handoff 
processes described herein. A Mobile Station 120 operating within communication 
system 100 is first in communication with a Source-Radio Network (S-RN) 108, 
wherein the term source refers to the RN as being the original serving network. 
The MS 120 has established a Service Instance (SI) with S-RN. A service 
instance refers to a link associated with a service option. For example, a service 
option may be a packet data link, a Voice over IP (VoIP) link, etc. The S-RN has 
established an A-10 connection with the Source-PDSN (S-PDSN) 104 via an IP 
Network 106. The A-10 connection is associated with the SI. Note that the 
various elements of the system, such as the S-PDSN 104, the S-RN 108, and the 
MS 120, may support only one SI, or may support multiple SI. Also, within a given 
system, such as system 100, various elements may support only a single SI while 
other elements support multiple SI. The later system configurations may lead to 
incompatibilities in the capabilities of the various elements, and thus effect 
handoff. The S-PDSN 102 is also in communication with an IP Network 130. 
Operation of system 100 may be as specified In the cdma2000 Wireless IP 
Network Standard. 

[1021] The MS 120 is mobile and may move into an area supported by a 
Target-RN (T-RN) 118. As the MS 120 is able to communicate with T-RN 118, 
handoff may proceed from S-RN 108 to T-RN 118. Once handoff of the wireless 
portion of the communication system 100 is completed, the packet data portion of 
the system 100 must set up the various PPP links, such as an A-10 connection 
from T-PDSN 114 to T-RN through IP Network 116. As discussed hereinabove, 
various scenarios are possible for the configuration and handoff processing of a 
system, such as system 100. 

[1022] In a first scenario, illustrated in FIG. 1 and with reference to FIG. 1 1 , the 
S-PDSN 104 and the T-PDSN 1 14 have a same capability with respect to handling 
Service Instances (SI). As illustrated In FIG. 11, multiple SI links may be 
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established to both S-PDSN 104 and T-PDSN 1 14. For multiple SI links, one link 
Is designated as a main link, or PPP link. The main link is used for setting up the 
PPP link and is also used for signaling associated with the multiple links. The main 
link is the link on which the primary packet service Instance is connected. It is the 
sen/ice instance that is first negotiated when establishing the packet service. This 
means that the initial PPP negotiation takes place over this service instance. The 
primary packet service instance has a direct relation to the packet data session 
itself. This means that whenever there is a packet data session, there's a primary 
packet service instance connected to it. The main link is identified as "MAIN SI." 
Additional links are referred to as auxiliary or secondary links, identified as "AUX 
SI." Each link is further defined by an A-1 0 connection to a PDSN. 
[1023] In the call flow scenario of FIG. 1 , the infrastructure elements, S-PDSN 
104 and T-PDSN 1 14 successfully handoff the communication with MS 120. The 
handoff is effected without passing responsibility on to MS 120. In other words, 
MS 120 is not required to initiate a new communication at the target network, such 
as may. have been required if handoff were not successful and the target network 
would tear down the main SI and auxiliary SI. As In FIG. 1 , S-PDSN 104 provides 
T-PDSN 114 with the necessary Information to establish communication with MS 
120. Note that even though handoff is completed within the radio network or 
wireless portion of the system, the packet data portion or IP portion requires 
additional information to set up the various connections required. For example, 
the T-PDSN 114 needs to know which SI is the main SI, as the T-PDSN 114 
needs to negotiate PPP set up on the main SI. 

[1024] FIG. 1 illustrates a call flow associated with fast handoff of one 
embodiment. FIG. 1 illustrates a successful case when the handoff happens 
between the same revisions of two PDSNs, e.g. both PDSN are implementing IS- 
835-B procedures. In this case, there are PDSN to PDSN (P-P) connections 
established successfully between the Target-PDSN (T-PDSN) and the Serving- 
PDSN (S-PDSN). In the situation that P-P connections can not be established 
correctly, the normal hard handoff should occur without tearing the traffic channel. 
However, if multiple service instances exist (for example, voice over IP), the target 
PDSN does not know the PPP service instance (main sen^ice instance), therefore. 



wo 03/079716 



PCTAJS03/07399 



it can not initiate PPP negotiation on the correct R-P connection. Each labeled 
step of call flow of FIG. 1 Is detailed as follows: 

A. The mobile station has one or more sessions established to the Source- 
Packet Data Service Node (S-PDSN) via the Source-Radio Network (S- 
RN). The mobile station may have multiple service instances allocated 
In the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends 
pilot reports to the S-RN. At this time, the mobile still has airlink traffic 
channels to the S-RN and an Internet Protocol (IP) session established 
to the S-PDSN. 

C. S-RN sends handoff request message to Target-Radio Network (T-RN) 
via Mobile Switching Center (MSG) (not shown). 

D. The T-RN sends an A1 1 Registration Request (RRQ) to the Target- 
Packet Data Service Node (T-PDSN) including the s bit set to 1 and the 
serving P-P address attribute set to the Pi IP address of the S-PDSN. 
P-P refers to the connection between the S-PDSN and the T-PDSN. Pi 
refers to the PDSN to IP connection. The s bit indicates simultaneous 
binding. 

E. The T-PDSN sends a P-P RRQ including the s bit set to 1 to the S- 
PDSN's Pi IP address. The setting of the s bit Indicates a request for a 
simultaneous binding at the S-PDSN. 

F. The S-PDSN replies with a P-P Registration Reply (RRP) with the reply 
code set to 0. The reply code indicates Indicates whether the operation 
is successful (or failure). The reply code 0 corresponds to a successful 
operation, wherein the reply code other than 0 gives a different failure 
reason. 

G. The T-PDSN sends an A1 1 RRP with the reply code set to 0 to the T- 
RN. 

H. At this point, fonward direction bearer traffic arriving at the S-PDSN is 
bicast to the S-RN and the T-PDSN. The T-RN may buffer the last N 
packets, where N is implementation dependent. Reverse direction 
bearer traffic traverses only the S-RN and the S-PDSN. 
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I. The S-RN hands off the mobile's Service Instance(s) (Sis) to the T-RN 
by sending a handoff direction command to the mobile station. 

J. The mobile station handoffs to the T-RN and sends a handoff 
completion indication to the T-RN. 

K. Upon completion of the handoff of the Service Instances (Sis), the T-RN 
sends an A1 1 RRQ with the s bit set to 0 and including an active start 
airlink record to the T-PDSN. 

L. The T-PDSN sends a P-P RRQ with the s bit set to 0 and including an 
active start airllnl< record to the S-PDSN. The active start airlink record 
sent is the same one that was received from the T-RN. 

M. The S-PDSN replies with a P-P RRP with the reply code set to 0. 

N. The T-PDSN send an A1 1 RRP with the reply code set to 0 to the T-RN. 

O. At this point, forward direction bearer traffic is tunneled from the S- 
PDSN to the T-PDSN over the P-P interface, then switched onto the 
appropriate A1 0 session and delivered to the T-RN. Reverse direction 
bearer traffic is sent from the mobile to the T-RN, then over the 
appropriate A10 session to the T-PDSN. The T-PDSN tunnels this 
traffic over the P-P interface to the S-PDSN. Note that the P-P session 
may be periodically refreshed by the T-PDSN sending a P-P RRQ to the 
S-PDSN. 

P. The S-PDSN initiates a teardown of the mobile's A10/A1 1 sesslon(s) to 

the S-RN by sending an A1 1 RUP to the S-RN. 
Q. The S-RN responds with an A1 1 RAK. 

R. The S-RN indicates that the session will be terminated by sending an 
A1 1 RRQ to the S-PDSN with the lifetime set to 0, including an active 
stop accounting record. Note that the accounting record will send to 
Authentication Authorization and Accounting (AAA) unit from Serving 
PDSN. AAA is not shown. 

S. The S-PDSN indicates that the session Is released by sending an A1 1 
RRP to the S-RN with the lifetime set to 0. Note that the S-PDSN does 
not delete the associated PPP context because it is being used by the 
mobile via the P-P interface. 
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[1025] In a second scenario, illustrated In FIG. 2, again S-PDSN and T-PDSN 
share same capabilities, however, they fail to negotiate the handoff of the multiple 
SI links. The S-PDSN is able to send a message Indicating which of the links is 
the main link. The T-PDSN then takes responsibility for the handoff and sets up 
connections for the MS. 

[1026] Note that the serving PDSN desires to send PPP service instance 
indication to the target PDSN In P-P RRP during the period of the signaling 
exchange to setup P-P connections. This information may be sent regardless of 
whether P-P connections are setup successfully or unsuccessfully. In the case 
that the P-P connections establishment fails or later some disconnection between 
T-PDSN and S-PDSN Is detected, the target PDSN uses this information to trigger 
the PPP negotiation on the correct R-P connection. FIG. 2 illustrates this type of 
call flow. Each labeled step of call flow of FIG. 1 is detailed as follows: 

A. The mobile station has one or more sessions established to the S-PDSN 
via the S-RN. The mobile may have multiple service instances allocated in 
the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. Note that the mobile still has airlink traffic channels to 
the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSG (not shown). 

D. The T-RN sends an A1 1 RRQ to the T-PDSN including the s bit set to 1 and 
the serving P-P address attribute set to the PI IP address of the S-PDSN. 

E. The T-PDSN sends a P-P RRQ including the s bit set to 1 to the S-PDSN's 
Pi IP address. The setting of the s bit indicates a request for a 
simultaneous binding at the S-PDSN. 

F. The S-PDSN replies with a P-P RRP with a reply code other than 0, 
Indicating that the P-P session cannot be established and Indicating the 
PPP service instance. 

G. The T-PDSN send an A1 1 RRP with the reply code set to 0 to the T-RN. 

H. The S-RN hands off the mobile's service instance(s) to the T-RN by 
sending handoff direction command to the mobile station. 

I. The mobile station handoff s to the T-RN and sends handoff completion 
indication to the T-RN. 
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J. Upon completion of the handoff of the service instances, the T-RN sends an 
A1 1 RRQ with the s bit set to 0 and including an active start airlink record to 
the T-PDSN. 

K. The T-PDSN send an A1 1 RRP with the reply code set to 0 to the T-RN. 
L. The T-PDSN Initiates PPP negotiation with the nnoblle by sending it an 

LCP-configure-request. 
M. PPP negotiation is complete. For simple IP sessions, bearer traffic may now 

flow In both directions over the T-RN and T-PDSN. For MIP sessions, the 

behavior is as follows below. 
N. The T-PDSN sends a Mobile IP (MIP) agent advertisement to the mobile. 

Note that the mobile may first send a MIP agent solicitation to the T-PDSN 

(not shown). 

O. The mobile sends a MIP RRQ to the T-PDSN. 
P. The T-PDSN processes the MIP RRQ and then fonwards it on to the HA. 
Q. If the MIP RRQ is accepted, the HA responds with a MIP RRP with a reply 
code of 0. 

R. The T-PDSN forwards the MIP RRP to the mobile. The mobile may now 

send and receive bearer data via its MIP session. 
[1027] If the target PDSN can not receive the P-P RRP correctly after several 
retransmissions, the target PDSN should indicate to the target RN in A1 1 RRP that 
the operation is failed. In response, the T-RN will release the traffic channel. In 
this third scenario, the target PDSN cannot receive any messages from the 
serving PDSN, and therefore, the MS releases the traffic channel. The 
responsibility for handoff falls to the MS, as the MS initiates the communications, 
i.e., sessions, with the target network. Note that for a given system, the radio 
network level handoff may have been completed successfully, however, the 
packet data network level must also accomplish a handoff from the S-PDSN to the 
T-PDSN. The third scenario is illustrated in FIG. 3, wherein each labeled step is 
described as follows: 

A. The mobile station has one or more sessions established to the S-PDSN 

via the S-RN. The mobile may have multiple service instances allocated in 

the S-RN. 
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B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. Please note that the mobile still has airlink traffic 
channels to the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSG (not shown). 

D. The T-RN sends an A1 1 RRQ to the T-PDSN including the s bit set to 1 and 
the serving P-P address attribute set to the Pi IP address of the S-PDSN. 

E. The T-PDSN sends a P-P RRQ including the s bit set to 1 to the S-PDSN's 
Pi IP address. The setting of the s bit indicates a request for a 
simultaneous binding at the S-PDSN. 

F. The T-PDSN does not receive a P-P RRP after a configurable number of 
retransmissions of the P-P RRQ. 

G. The T-PDSN send an A1 1 RRP with the reply code set to other than 0 to 
the T-RN. 

H. The S-RN hands off the mobile's service instance(s) to the T-RN by 
sending handoff direction command to the mobile station. 

I. The mobile station handoffs to the T-RN and sends handoff completion 
indication to the T-RN. 

J. Upon completion of the handoff of the service instances, the T-RN release 
the traffic channel. 

K. The MS re-initiates the S033 to setup the traffic channel. The S033 refers 

to the data service option 33 as specified in IS707. 
L. T-RN sends A1 1 RRQ to set up R-P connection. 
M. T-PDSN replies with A1 1 RRP with result code set to '0'. 
N. The MS initiates PPP negotiation with the T-PDSN by sending it an LCP- 

configure-request, 

O. PPP negotiation is complete. For simple IP sessions, bearer traffic may now 
flow in both directions over the T-RN and T-PDSN. For MIP sessions, the 
behavior is as follows below. 

P. The T-PDSN sends a MIP agent advertisement to the mobile. Note that the 
mobile may first send a MIP agent solicitation to the T-PDSN (not shown). 

Q. The mobile sends a MIP RRQ to the T-PDSN. 

R. The T-PDSN processes the MIP RRQ and then fonwards it on to the HA. 
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S. If the MIP RRQ is accepted, the HA responds with a MIP RRP with a reply 
code of 0. 

T. The T-PDSN forwards the MIP RRP to the mobile. The mobile may now 
send and receive bearer data via its MIP session. 
[1028] In a fourth scenario, the target network, and T-PDSN specifically, is 
unable to receive handoff information from the source network, and S-PDSN 
specifically. The target network attempts to set up the PPP connections via all of 
the SI links. In other words, since the T-PDSN does not know which SI link to use 
for setting up the PPP connection, it sends the request information on ail links. In 
this case, the T-PDSN sends a Link Control Protocol (LCP) registration message 
on all SI links. In the present example, the MS desires two links, one for packet 
data, such as web accesses, and one for Voice over IP (VoIP). The target PDSN 
can still Indicate the target RN in A11 RRP that the operation is successful. And 
then the T-PDSN sends LCP Configure Request on all R-P connections to trigger 
the PPP negotiation. The PPP negotiation will occur over the PPP service 
instance. 

[1029] For the secondary packet service instance(s), LCP Configure Request is 
treated as packet data payload (for example, for Voice over IP, it is treated as RTP 
payload), therefore, it will be either discarded if the format is not correct or be 
passed to the application and is treated as error. After PPP session is setup, 
MCFTP can be used for setup the secondary packet sen/ice instance(s). Each 
labeled step in the call flow of FIG 4 is described as follows: 

A. The mobile station has one or more sessions established to the S-PDSN 
via the S-RN. The mobile may have multiple service instances allocated In 
the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. Please note that the mobile still has airlink traffic 
channels to the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSC (not shown here). 

D. The T-RN sends an A1 1 RRQ to the T-PDSN including the s bit set to 1 and 
the serving P-P address attribute set to the Pi IP address of the S-PDSN. 



wo 03/079716 



PCTAJS03/07399 



12 

E. The T-PDSN sends a P-P RRQ including the s bit set to 1 to the S-PDSN's 
Pi IP address. The setting of the s bit indicates a request for a 
simultaneous binding at the S-PDSN. 

F. The T-PDSN does not receive a P-P RRP after a configurable number of 
retransmissions of the P-P RRQ. 

G. The T-PDSN sends an A1 1 RRP with the reply code set to 0 to the T-RN. 

H. The S-RN hands off the mobile's service instance(s) to the T-RN by 
sending handoff direction command to the mobile station. 

I. The mobile station handoffs to the T-RN and sends handoff completion 
indication to the T-RN. 

J. Upon completion of the handoff of the service instances, the T-RN sends 

A11 RRQ to T-PDSN. 
K. T-PDSN replies with A1 1 RRP. 

L. T-PDSN sends LCP Configure Request on all service instances. 

M. The PPP negotiation only occurs over PPP service Instance. 

N. MCFTP sent over PPP service instance is used for setup flow treatment 

and channel treatment for secondary service instance(s). 
0. For simple IP sessions, bearer traffic may now flow in both directions over 

the T-RN and T-PDSN. For MIP sessions, the behavior is as follows below. 
P. The T-PDSN sends a MIP agent advertisement to the mobile. Note that the 

mobile may first send a MIP agent solicitation to the T-PDSN (not shown). 
Q. The mobile sends a MIP RRQ to the T-PDSN. 
R. The T-PDSN processes the MIP RRQ and then fonwards it on to the HA. 
S. If the MIP RRQ is accepted, the HA responds with a MIP RRP with a reply 

code of 0. 

T. The T-PDSN forwards the MIP RRP to the mobile. The mobile may now 
send and receive bearer data via its MIP session. 
[1030] In a fifth scenario, illustrated in FIG. 5, the MS again desires multiple 
Sis, specifically two, however, the main PPP SI is domnant. While the main SI is 
dormant, the corresponding A10 is still in place. For the Dormant Service 
Instance, the MS is responsible to trigger Dormant Handoff after detecting the 
Packet Zone ID (PZID) is changed upon receiving In-traffic System Parameter 
Message (ISPM) from the traffic channel. The PZID identifies the packet data 
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network supporting the MS. There are two problems with this scenario. First, if 
the MS fails to receive the ISPM, the call Is dropped as there is no A10 and no P-P 
connection for the PPP Service instance. Second, the dormant service instance 
has to be transitioned to the Active state. The dormant service may not be 
required, and therefore making it active to accomplish handoff is a waste of 
resources. Each labeled step Is illustrated In FIG. 5, and described as follows: 

A. The mobile station has multiple sessions established to the S-PDSN via the 
S-RN. The mobile station has multiple service instance(s) In Dormant (for 
example, PPP service Instance) and has multiple service Instances active 
and allocated in the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. At this time, the mobile still has airlink traffic channels 
to the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSG (not shown here). 

D. The T-RN sends an A1 1 RRQ to the T-PDSN including the s bit set to 1 and 
the serving P-P address attribute set to the Pi IP address of the S-PDSN. 

E. The T-PDSN sends a P-P RRQ including the s bit set to 1 to the S-PDSN's 
Pi IP address. The setting of the s bit indicates a request for a 
simultaneous binding at the S-PDSN. 

F. The S-PDSN replies with a P-P RRP with the reply code set to 0. 

G. The T-PDSN sends an A1 1 RRP with the reply code set to 0 to the T-RN. 

H. At this point, forward direction bearer traffic an'iving at the S-PDSN is bicast 
to the S-RN and the T-PDSN for the Active Service Instance. The T-RN 
may buffer the last N packets, where N Is implementation dependent. 
Reverse direction bearer traffic traverses only the S-RN and the S-PDSN. 

I. The S-RN hands off the mobile's service instance(s) to the T-RN by 
sending handoff direction command to the mobile station. 

J. The mobile station handoff s to the T-RN and sends handoff completion 

indication to the T-RN. 
K. Upon completion of the handoff of the service instances, the T-RN sends an 

A1 1 RRQ with the s bit set to 0 and including an active start airlink record to 

the T-PDSN. 
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L. The T-PDSN sends a P-P RRQ with the s bit set to 0 and including an 

active start airlini< record to the S-PDSN. The active start airlink record sent 

is the same one that was received from the T-RN. 
M. The S-PDSN replies with a P-P RRP with the reply code set to 0. 
N. The T-PDSN send an A1 1 RRP with the reply code set to 0 to the T-RN. 
O. The T-RN sends system information via In-Traffic System Parameter 

Message (ISPM) including the new Packet Zone ID (PZID). 
P. The MS detects PZID is changed, the MS will send Ehanced Origination 

Message (EOM) to set up S033 which is main service instance as an 

example. 

Q. The T-RN sends A1 1 RRQ to setup A1 0 connection. 
R. The T-PDSN sends P-P RRQ to setup P-P connection. 
S. The S-PDSN replies with P-P RRP. 
T. The T-PDSN replies with A1 1 RRP. 

U. T-RN sends service connect to the MS to connect PPP service instance. 
V. The MS replies with service connect completion. 

W. Upon the PPP service instance is connected, T-RN sends A1 1 RRQ to start 

accounting record. 
X. The T-PDSN sends P-P RRQ to S-PDSN. 
Y. The S-PDSN replies with P-P RRP. 
Z. T-PDSN replies with A1 1 RRP. 

AA. At this point, forward direction bearer traffic for both PPP service 
instances and Secondary Service Instance are tunneled from the S-PDSN 
to the T-PDSN over the P-P interface, then switched onto the appropriate 
A10 session and delivered to the T-RN. Reverse direction bearer traffic is 
sent from the mobile to the T-RN, then over the appropriate A10 session to 
the T-PDSN. The T-PDSN tunnels this traffic over the P-P interface to the 
S-PDSN. Note that the P-P session may be periodically refreshed by the T- 
PDSN sending a P-P RRQ to the S-PDSN. 

BB. The S-PDSN Initiates a teardown of the mobile's A1 0/A1 1 session(s) 
to the S-RN by sending an A1 1 RUP to the S-RN. 

CC. The S-RN responds with an A1 1 RAK. 
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DD. The S-RN indicates that the session will be terminated by sending an 
A1 1 RRQ to the S-PDSN with the lifetime set to 0, including an active stop 

accounting record. 

EE. The S-PDSN indicates that the session is released by sending an 
A1 1 RRP to the S-RN with the lifetime set to 0. Note that the S-PDSN does 
not delete the associated PPP context because it is being used by the 
mobile via the P-P interface. 
[1031] In a sixth scenario, illustrated in FIG. 6, when the P-P Connection is 
successfully established for secondary Service Instances with S-PDSN, S-PDSN 
is responsible to trigger the set up of P-P connection for dormant PPP service 
instance or other dormant service instances as the S-PDSN has knowledge as to 
which service is in Dormant Mode. The T-PDSN may start to trigger the set up of 
A10 connections for the dormant service instances. The labeled steps of the call 
flow of FIG. 6 are described as follows: 

A. The mobile station has multiple sessions established to the S-PDSN via the 
S-RN. The mobile station has multiple service instance{s) in Dormant (for 
example, PPP service Instance) and has multiple service instances active 
and allocated in the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. At this time, the mobile still has alrlink traffic channels 
to the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSG (not shown here). 

D. The T-RN sends an A1 1 RRQ to the T-PDSN including the s bit set to 1 and 
the serving P-P address attribute set to the Pi IP address of the S-PDSN. 

E. The T-PDSN sends a P-P RRQ including the s bit set to 1 to the S-PDSN's 
Pi IP address. The setting of the s bit indicates a request for a 
simultaneous binding at the S-PDSN. 

F. The S-PDSN replies with a P-P RRP with the reply code set to 0. 

G. The T-PDSN sends an A1 1 RRP with the reply code set to 0 to the T-RN. 

H. Because S-PDSN knows PPP sen/ice instance is in Dormant mode, S- 
PDSN will sends P-P RRQ to T-PDSN to set up P-P connection. 

I. T-PDSN replies with P-P RRP with result code set to '0'. 
There are two options here. 
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Option 1 : 

J. The T-PDSN sends A1 1 RUP to T-RN to request for establishing R-P 

connection for PPP service Instance. 
K. The T-RN replies with A1 1 RAK. 
L. Then the T-RN sends A1 1 RRQ to set up A1 0 connection. 
M. T-PDSN replies with A1 1 RRP with code set to '0'. 
Option 2: 

N. The T-PDSN sends A1 1 RRQ to establish R-P connection for PPP service 
Instance. 

O. The T-RN replies with A1 1 RRP with code set to '0'. 

P. At this point, fonward direction bearer traffic arriving at the S-PDSN is bicast 

to the S-RN and the T-PDSN for both PPP Service Instance and Secondary 

Service Instance. The T-RN may buffer the last N packets, where N is 

implementation dependent. Reverse direction bearer traffic traverses only 

the S-RN and the S-PDSN. 
Q. The S-RN hands off the mobile's sen/ice Instance(s) to the T-RN by 

sending handoff direction command to the mobile station. 
R. The mobile station handoffs to the T-RN and sends handoff completion 

indication to the T-RN. 
S. Upon completion of the handoff of the service instances, the T-RN sends an 

A1 1 RRQ with the s bit set to 0 and including an active start airiink record to 

the T-PDSN. 

T. The T-PDSN sends a P-P RRQ with the s bit set to 0 and including an 
active start airiink record to the S-PDSN. The active start airiink record sent 
is the same one that was received from the T-RN. 

U. The S-PDSN replies with a P-P RRP with the reply code set to 0. 

V. The T-PDSN send an A1 1 RRP with the reply code set to 0 to the T-RN. 

W. At this point, forward direction bearer traffic for both PPP semce Instances 
and Secondary Service Instance are tunneled from the S-PDSN to the T- 
PDSN over the P-P interface, then switched onto the appropriate A10 
session and delivered to the T-RN. Reverse direction bearer traffic is sent 
from the mobile to the T-RN, then over the appropriate A10 session to the 
T-PDSN. The T-PDSN tunnels this traffic over the P-P interface to the S- 
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PDSN. Note that the P-P session may be periodically refreshed by the T- 

PDSN sending a P-P RRQ to the S-PDSN. 
X. The S-PDSN initiates a teardown of the mobile's A10/A1 1 session(s) to the 

S-RN by sending an A1 1 RUP to the S-RN. 
Y. The S-RN responds with an A1 1 RAK. 

Z. The S-RN indicates that the session will be terminated by sending an A1 1 
RRQ to the S-PDSN with the lifetime set to 0, including an active stop 
accounting record. 

AA. The S-PDSN indicates that the session is released by sending an 
A1 1 RRP to the S-RN with the lifetime set to 0. Note that the S-PDSN does 
not delete the associated PPP context because it is being used by the 
mobile via the P-P interface. 
[1032] The scenarios and examples discussed hereinabove assume a same 
version of protocols for the serving network and the target network. In other 
words, these examples and scenarios assumed that the S-PDSN and the T-PDSN 
had similar capabilities. For example, each was able to support multiple Service 
Instances. Consider the situation where the packet data networks and/or the 
radio networks do not have similar capabilities, but rather, one is able to handle 
multiple Sis, while the other is not. 

[1033] When the serving network has capability to support multiple Sis, and the 
target network does not, the system must determine which one to terminate and 
how to effect such termination. For example, when the handoff occurs from low 
revision PDSN (IS-835 Release A or lower) to high revision PDSN (IS-835 
Release B or higher), there are no problems because IS-835-A PDSN can only 
support one packet data service instance. In this case, after handoff to the target 
PDSN, the secondary service instances can be setup. When the serving network 
has capability for only a single SI, as specified in lS-95. Also cdma2000 Release 
0 specifies support for a single SI. Starting from cdma2000 Release A, multiple SI 
are specified to be supported, and the target has capability for multiple Sis, the 
responsibility is on the MS to initiate the additional Sis with the target network after 
handoff. 

[1034] A seventh scenario is illustrated in FIG. 7 and with respect to FIG. 13, 
wherein the target radio network, T-RN, is not able to support multiple Sis. Note 
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that the serving radio network, S-RN, knows that the target network cannot 
support sessions that are active in the serving network prior to handoff. For 
example, when the handoff occurs from high revision PDSN (IS-835 Release B or 
higher) to low revision PDSN (IS-835 Release A or lower), if there are secondary 
service instances established, how to handle these multiple service instances 
becomes a problem. In this situation, because the serving RN knows the target 
RN cannot support concurrent sen/Ices (multiple R-P connections), the serving RN 
only performs handoff for the main service Instance (PPP Service instance) to T- 
RN. The MS may also indicate to the user that the secondary service instances 
are dropped because of roaming to a lower revisions area. Each of the labeled 
steps In the call flow of FIG. 7 is described as follows: 

A. The mobile station has one or more sessions established to the S-PDSN 
via the S-RN. The mobile may have multiple service instances allocated In 
the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. Please note that the mobile still has airlink traffic 
channels to the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSG (not shown). 

D. Because S-RN knows the T-RN cannot support concurrent service, S-RN 
hands off the mobile's PPP service instance to the T-RN by sending 
handoff direction command to the mobile station. 

E. The mobile station handoffs to the T-RN and sends handoff completion 
indication to the T-RN. 

F. Upon completion of the handoff of the sen/ice instances, the T-RN sends an 
A1 1 RRQ with the s bit set to 0 and Including an active start airlink record to 
the T-PDSN. 

G. The T-PDSN send an A1 1 RRP with the reply code set to 0 to the T-RN. 

H. The T-PDSN initiates PPP negotiation with the mobile by sending it an 
LCP-configure-request. 

I . PPP negotiation is complete. For simple IP sessions, bearer traffic may now 
flow in both directions over the T-RN and T-PDSN. For MIP sessions, the 
behavior is as follows below. 
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J. The T-PDSN sends a MIP agent advertisement to the mobile. Note that the 

mobile may first send a MIP agent solicitation to the T-PDSN (not shown). 
K. The mobile sends a MIP RRQ to the T-PDSN. 

L. The T-PDSN processes the MIP RRQ and then fonwards it on to the HA. 
M. If the MIP RRQ is accepted, the HA responds with a MIP RRP with a reply 
code of 0. 

N. The T-PDSN fonwards the MIP RRP to the mobile. The mobile may now 
send and receive bearer data via its MIP session. 
[1035] FIG. 13 illustrates the system 100 including a T-PDSN 144, which may 
be capable of multiple Sis, but is illustrated supporting the one SI allowed by T-RN 
148. After successful handoff to the target network, the main SI is established with 
T-RN 148 and the associated A10 connection is established between T-RN 148 
and T-PDSN 144. 

[1036] In an eight scenario, illustrated in FIG. 8 and with respect to FIG. 12, the 
target RN can support concurrent service, i.e., multiple sen/ice instances, but the 
corresponding T-PDSN can not support multiple service instances. As illustrated 
in the call flow of FIG. 8, the T-RN sends an A1 1 RRQ to request for bicasting 
upon handoff is requested by the S-RN. Since the old revision of T-PDSN doesn't 
support P-P connection and bicasting establishment, the T-PDSN will send A11 
RRP to indicate failure. In this case, T-RN doesn't know which is PPP service 
instance, the T-RN has to release traffic channel. The MS should indicate the user 
call is dropped because of roaming to the low revision area. If needed, the MS will 
start to set up S033 from the beginning. Each of the labeled step of FIG. 8 is 
described as follows: 

A. The mobile station has one or more sessions established to the S-PDSN 
via the S-RN. The mobile may have multiple service instances allocated in 
the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. Please note that the mobile still has airlink traffic 
channels to the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSG (not shown here). 

D. The T-RN sends an A1 1 RRQ to the T-PDSN including the s bit set to 1 and 
the sen/ing P-P address attribute set to the Pi IP address of the S-PDSN. 
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E. Since the T-PDSN does not support fast P-P interface handoff, tlie T-PDSN 
sends an A1 1 RRP with the reply code set to other than 0 to the T-RN. 

F. The S-RN hands off the mobile's service instance(s) to the T-RN by 
sending handoff direction command to the mobile station. 

G. The mobile station handoffs to the T-RN and sends handoff completion 
indication to the T-RN. 

H. Upon completion of the handoff of the service instances, the T-RN releases 
the traffic channel since it doesn't know which service instance is PPP 
service instance. 

I. The MS re-initiates the S033 to setup the traffic channel. 
J. T-RN sends A1 1 RRQ to set up R-P connection. 

K. T-PDSN replies with A1 1 RRP with result code set to '0'. 
L. The MS initiates PPP negotiation with the T-PDSN by sending it an LCP- 
configure-request. 

M. PPP negotiation is complete. For simple IP sessions, bearer traffic may now 
flow in both directions over the T-RN and T-PDSN. For MIP sessions, the 
behavior is as follows below. 

N. The T-PDSN sends a MIP agent advertisement to the mobile. Note that the 
mobile may first send a MIP agent solicitation to the T-PDSN (not shown). 

O. The mobile sends a MIP RRQ to the T-PDSN. 

P. The T-PDSN processes the MIP RRQ and then forwards it on to the HA. 
Q. If the MIP RRQ is accepted, the HA responds with a MIP RRP with a reply 
code of 0. 

R. The T-PDSN fonwards the MIP RRP to the mobile. The mobile may now 
send and receive bearer data via its MIP session. 
[1037] FIG. 12 illustrates the system 100 including a T-PDSN 134 which is not 
capable to support multiple sessions. Therefore, even though, the T-RN 118 may 
support multiple Sis, only the main SI has a corresponding A10 connection 
established with T-PDSN 134. 

[1038] In a ninth scenario, illustrated in FIG. 9, during the handoff between T- 
RN and S-RN, the PPP service instance infonnation is also exchanged. Therefore, 
when The T-RN receives failure indication from T-PDSN, the T-RN only release 
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the secondary service instance and l<eep the PPP service instance connected. 
Each of the labeled steps of the call flow of FIG. 9 is described as follows: 

A. The mobile station has one or more sessions established to the S-PDSN 
via the S-RN. The mobile may have multiple service instances allocated in 
the S-RN. 

B. The mobile station detects the pilot signal strength changes and sends pilot 
reports to the S-RN. Please note that the mobile still has airlink traffic 
channels to the S-RN and an IP session established to the S-PDSN. 

C. S-RN sends handoff request message to T-RN via MSG (not shown here). 
Also the S-RN indicate the PPP service instance to T-RN. 

D. The T-RN sends an A1 1 RRQ to the T-PDSN including the s bit set to 1 and 
the serving P-P address attribute set to the Pi IP address of the S-PDSN. 

E. Since the T-PDSN does not support fast P-P interface handoff, the T-PDSN 
sends an A1 1 RRP with the reply code set to other than 0 to the T-RN. 

F. The S-RN hands off the mobile's service instance(s) to the T-RN by 
sending handoff direction command to the mobile station. 

G. The mobile station handoffs to the T-RN and sends handoff completion 
indication to the T-RN. 

H. Since the T-RN knows which service Instance is PPP service instance, the 
T-RN sends A11 RRQ to set up R-P connection for PPP service instance. 

I. T-PDSN replies with A1 1 RRP with result code set to '0'. 

J. The T-RN also sends service connect to the MS to release the Secondary 
Sen/Ice Instance and maintain the PPP Service Instance. 

K. T-PDSN will trigger the PPP negotiation by sending LCP Configure 
Request. 

L. PPP negotiation is complete. For simple IP sessions, bearer traffic may now 
flow in both directions over the T-RN and T-PDSN. For MIP sessions, the 
behavior is as follows below. 

M. The T-PDSN sends a MIP agent advertisement to the mobile. Note that the 
mobile may first send a MIP agent solicitation to the T-PDSN (not shown). 

N. The mobile sends a MIP RRQ to the T-PDSN. 

O. The T-PDSN processes the MIP RRQ and then forwards it on to the HA. 



wo 03/079716 



PCTAJS03/07399 



22 

P. If the MIP RRQ is accepted, the HA responds with a MIP RRP with a reply 
code of 0. 

Q. The T-PDSN forwards the MIP RRP to the mobile. The mobile may now 
send and receive bearer data via its MIP session. 
[1039] Those of skill in the art would understand that information and signals 
may be represented using any of a variety of different technologies and 
techniques. For example, data, instructions, commands, information, signals, bits, 
symbols, and chips that may be referenced throughout the above description may 
be represented by voltages, currents, electromagnetic waves, magnetic fields or 
particles, optical fields or particles, or any combination thereof. 
[1040] Those of skill would further appreciate that the various illustrative logical 
blocks, modules, circuits, and algorithm steps described in connection with the 
embodiments disclosed herein may be implemented as electronic hardware, 
computer software, or combinations of both. To clearly illustrate this 
interchangeability of hardware and software, various illustrative components, 
blocks, modules, circuits, and steps have been described above generally in terms 
of their functionality. Whether such functionality is implemented as hardware or 
software depends upon the particular application and design constraints imposed 
on the overall system. Skilled artisans may implement the described functionality 
in varying ways for each particular application, but such implementation decisions 
should not be Interpreted as causing a departure from the scope of the present 
invention. 

[1041] The various illustrative logical blocks, modules, and circuits described in 
connection with the embodiments disclosed herein may be implemented or 
performed with a general purpose processor, a digital signal processor (DSP), an 
application specific integrated circuit (ASIC), a field programmable gate array 
(FPGA) or other programmable logic device, discrete gate or transistor logic, 
discrete hardware components, or any combination thereof designed to perform 
the functions described herein. A general purpose processor may be a 
microprocessor, but in the alternative, the processor may be any conventional 
processor, controller, microcontroller, or state machine. A processor may also be 
implemented as a combination of computing devices, e.g., a combination of a DSP 
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and a microprocessor, a plurality of microprocessors, one or more 
microprocessors in conjunction with a DSP core, or any other such configuration. 
[1042] The steps of a method or algorithm described in connection with the 
embodiments disclosed herein may be embodied directly in hardware, in a 
software module executed by a processor, or in a combination of the two. A 
software module may reside in RAM memory, flash memory, ROM memory, 
EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a 
CD-ROM, or any other form of storage medium known in the art. An exemplary 
storage medium is coupled to the processor such the processor can read 
information from, and write information to, the storage medium. In the altemative, 
the storage medium may be integral to the processor. The processor and the 
storage medium may reside in an ASIC. The ASIC may reside In a user terminal. 
In the altemative, the processor and the storage medium may reside as discrete 
components in a user terminal. 

[1043] The previous description of the disclosed embodiments is provided to 
enable any person skilled in the art to make or use the present Invention. Various 
modifications to these embodiments will be readily apparent to those skilled in the 
art, and the generic principles defined herein may be applied to other 
embodiments without departing from the spirit or scope of the invention. Thus, the 
present invention is not intended to be limited to the embodiments shown herein 
but is to be accorded the widest scope consistent with the principles and novel 
features disclosed herein. 



[1 044] WHAT IS CLAIMED IS: 
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CLAIMS 

1 . A method for handoff in a communication system, comprising: 
establisliing a main link and a secondary linl< between a mobile unit a 

serving packet data service node via a serving radio network; 
initiating a handoff from the sen/ing radio network to a target radio network; 
and 

sending a message to a target packet data service node identifying the 
main link. 

2. The method as in claim 1 , further comprising: . 

Establishing a main link and a secondary link between the mobile unit and 
the target packet data service node. 

3. The method as in claim 2, further comprising: 

sending a Point-to-Point Protocol (PPP) configuration request from the 
target packet data service node to the mobile unit. 

4. The method as in claim 1 , wherein the main link is associated with a first 
service instance, and the secondary link is associated with a second service 

instance. 

5. The method as in claim 4, wherein the second sen/ice instance is a Voice 
over Internet Protocol service. 

6. The method as in claim 1 , wherein the serving packet data service node 
and the target packet data service node incorporate compatible protocols. 

7. The method as in claim 6, wherein the compatible protocols are a same 
protocol. 



8. 



The method as in claim 1 , wherein the initiating further comprises: 
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sending a pilot report from the mobile unit to the serving radio network. 

9. The method as in claim 8, further comprising: 

sending a handoff message form the service radio network to the target 
radio networl<, 

1 0. The method as in claim 9, wherein the pilot report identifies a pilot signal 
strength. 

11. The method as in claim 1 , wherein the message is a reply to a registration 
request. 

12. A method for handoff in a communication system, comprising: 
initiating handoff from a serving radio network to a target radio network; 
receiving a registration request from a target radio network; 

sending a link initiation message to a mobile unit on a first link via the target 
radio network, the first link associated with a first service instance; 
and 

sending the link initiation message to the mobile unit on a second link via 
the target radio network, the second link associated with a second 
service instance. 

13. The method as in claim 1 2, wherein the first link Is a Point-to-Point Protocol 
(PPP) connection. 

1 4. The method as in claim 1 3, wherein the second link is an auxiliary link for 
Voice over Internet Protocol. 

1 5. The method as in claim 12, further comprising: 

requesting registration from a serving packet data service node. 

1 6. A method for handoff in a communication system, comprising: 
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initiating a handoff from a serving radio networl< to a target radio networic, 
the serving radio networl< adapted to support multiple service 
instances, the target radio network adapted to support one service 
instance; 

terminating a secondary link to the serving radio network; 

sending main link information of the serving radio network to the target 

radio network; and 
performing handoff to the target radio network. 

17. A method for handoff In a communication system, comprising: 
Initiating a handoff from a sending radio network to a target radio network, 

the serving radio network coupled to a serving packet data service 
node adapted to support multiple sen/ice instances, the target radio 
network coupled to a target packet data sen/ice node adapted to 
support one service instance; 

sending main link information of the serving radio network to the target 
radio network; and 

performing handoff to the target radio network. 

1 8. An apparatus in a communication system, comprising: 

means for establishing a main link and a secondary link between a mobile 
unit a serving packet data sen^ice node via a serving radio network; 

means for initiating a handoff from the serving radio network to a target 
radio network; and 

means for sending a message to a target packet data service node 
identifying the main link. 

1 9. An apparatus in a communication system, comprising: 

means for initiating handoff from a serving radio network to a target radio 
network; 

means for receiving a registration request from a target radio network; 
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means for sending a link initiation message to a mobile unit on a first lini< 

via tlie target radio networl^, tfie first linl< associated with a first 

service instance; and 
means for sending tfie linic initiation message to the mobile unit on a second 

link via the target radio network, the second link associated with a 

second service instance. 

20. An apparatus in a communication system, comprising: 

means for initiating a handoff from a serving radio network to a target radio 
network, the sending radio network adapted to support multiple 
service instances, the target radio network adapted to support one 
sen/ice instance; 

means for temninating a secondary link to the serving radio network; 
means for sending main link information of the serving radio network to the 

target radio network; and 
means for performing handoff to the target radio network. 

21 . A packet data service node in a communication system, adapted to: 
establish a main link and a secondary link with a mobile unit via a serving 

radio network; 
initiate a handoff to a target radio network; and 

send a message to a target packet data sen/ice node identifying the main 
link. 
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